» Topic:  WLSI - Windows Local Shellcode Injection

» Added by:  Cesar

» Date:  16.3.2006

  This paper describes a new technique to create 100%
reliable local exploits for Windows
operating systems, the technique uses some Windows
operating systems design weaknesses
that allow low privileged processes to insert data on
almost any Windows processes no matter
if they are running under high privileges.

We all know
that local exploitation is much easier
than remote exploitation but it has some difficulties.
After a brief introduction and a description
of the technique, a couple of samples (Exploits for
MS05-012 and MS05-040) will be provided so the reader
will be able to write
his/her own exploits.